CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2022-43434
Medium (5.3) in jenkins neuvector vulnerability scanner. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in io.jenkins.plugins:neuvector-vulnerability-scanner 1.22.
Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
- CWE
- CWE-693
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:neuvector_vulnerability_scanner
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-wmfh-h3vm-rcxm | Maven | io.jenkins.plugins:neuvector-vulnerability-scanner | <1.22 | 1.22 |